F5互联网出口解决方案培训资料(共37张PPT).ppt

1、电信联通移动互联网接入区应用服务器群组 应用服务区域SwitchSwitchClientsF5 BIG-IP标准版解决方案说明：GTM+LTM结合，完美解决进站出站流量负载、多链路接入问题，智能聚合多条运营商链路，同时为业务级容灾（双活）数据中心预留空间；GTM提供DNSSEC功能，确保DNS来源的真实性与完整性，保障用户DNS系统安全；DNS Service为用户提供最大超过8M QPS的高性能DNS系统，并可有效防御DNS DDoS攻击；LTM设备确保大量并发业务系统的安全、快速和高可用性，解决大流量并发处理问题；AFM网络防火墙为IDC提供3-4层网络安全防护；TMOS融合了可定制的iR

2、ules和UIE，为处理应用访问或流程中的应用流量提供了强大的控制力；AVR模块提供WEB应用性能检测、监控；自带 SSL VPN模块帮助用户在任何地点安全快速地接入内网，实现对设备的远程管理；提供高性能的硬件体系架构，满足用户性能和功能的按需扩展需求；简化整个数据中心多层架构，减少故障点及设备运维管理成本。*）；IT投入成本（*）的需求，降70%的外部主要技术：主要技术：多链路负载均衡外网智能DNS及安全防护应用双活L3-L4 DDOS防护数据中心防火墙核心业务：核心业务：电子商务平台CMSEPS系统电子邮件系统产销管理系统设备部署：设备部署：BR-4000s*2用户需求：用户需求：业务创新

3、，从传统商务模式向O2O服务模式转变建立高可用，具备高并发处理能力的电子商务平台有能力防护L3-L4层的DDoS攻击确保用户的访问体验解决方案优势：GTM+LTM结合，完美解决进站出站流量负载、多链路接入问题，智能聚合多条运营商链路，同时为业务级容灾数据中心预留空间GTM提供完善的DNS服务，提供智能的DNS解析功能LTM设备确保大量并发业务系统的安全、快速和高可用性，解决大流量并发处理问题AFM数据中心防火墙可部署1-4层网络安全策略，实现了安全边界隔离，并提供了L3-L4的DDOS攻击防护高性能的体系架构，支撑数据中心业务的处理能力；满足用户性能和功能的按需扩展需求TMOS融合了可定制的i

4、Rules和UIE，为处理访问中的应用流量提供了强大的控制力APM提供安全便捷的远程SSL VPN接入，方便远程进行数据中心维护管理客户收益：通过F5 BR-4000S的部署，使用F5 Synthesis新融合架构，在一台设备上完成客户的L4-L7服务的需求，大大降低了管理的复杂度实现了企业各种核心业务系统应用的高可用提升了 DNS 基础架构的性能和其安全防护能力完善的DDOS安全防护架构，对恶意攻击起到了很好的防护，减少70%的外部攻击防护等服Two-to three-line summary of findings.Further detail in the right hand colu

5、mn below.9%10%58%58%23%Two-to three-line summary of findings.Further details in the right hand column below.Two-to three-line summary of findings.$X millionSept 12,2013You can double-click on these charts to open in Excel and change the data there.50%74%82%Heres another option for percentage-based i

6、nformation.Three to four max per slide.Next-Generation FirewallUsers leverage NGFW foroutbound protectionCan inspect SSL at either tierCustomersDDoS AttackPartnersDDoS AttackISP providesvolumetric DDoSserviceCloudScrubbing ServiceBIG-IP Advanced Firewall Manager BIG-IP Local Traffic Manager BIG-IP G

7、lobal Traffic ManagerBIG-IP Access Policy ManagerBIG-IP Application Security ManagerISPaISPbNetwork Firewall Services+DNS Services+Simple Load Balancing to Tier 2BIG-IP Platform+IP Intelligence(IPI)ModuleBIG-IP PlatformWeb Application Firewall Services+SSL TerminationTier 2:Protecting L7Tier 1:Prote

8、cting L34 and DNSBIG-IP Local Traffic ManagerBIG-IP Global Traffic ManagerBIG-IP Application Acceleration ManagerBIG-IP Advanced Firewall ManagerBIG-IP Access Policy ManagerBIG-IP Application Security ManagerBIG-IP Edge ClientBIG-IP Carrier-Grade NATBIG-IP Policy Enforcement ManagerSignaling Deliver

9、y ControllerOpenBloxMobile App ManagerBIG-IQBIG-IQ SecurityBIG-IQ CloudBIG-IQCloudVirtual EditionsBIG-IQSecurityBIG-IPLocal TrafficManager BIG-IPGlobal TrafficManager Application ExamplesBIG-IP Local Traffic ManagerBIG-IP Access Policy ManagerBIG-IP Application Security ManagerSignaling Delivery Con

10、trollerMobile App ManagerSignaling DeliveryControllerVIPRION PlatformBIG-IP PlatformBIG-IP Virtual EditionForm factor not requiredForm and platform name needed,but not specific model numberTo represent F5 or third-party hardware,you can choose from the three options below.When deciding which to use,

11、consider how much information your audience needs.VIPRION PlatformVIPRION PlatformBIG-IP PlatformLoad BalancingDDoS ProtectionFirewallInternetInternetVIPRION PlatformLoad BalancingDDoS ProtectionFirewallDevicesData CenterDevicesData CenterDesktopLaptopPhoneTabletDesktopLaptopSmartphoneTabletDesktopE

12、-CommerceInfectedLaptopWithAuthenticationTablet withAppsDesktopReportingMobileHotspotMobileHotspotPasscodeTablet withCollaborationMobileHotspotClustered GroupingsHorizontal GroupingsVertical GroupingsDevicesDevicesDevicesMobileDevicesMobile DevicesMobile DevicesServerServersServersServersServerClass

13、icServerBladeServerServerRackStorageDatabaseDataPublicCloudPrivate/PublicCloudHybridCloudPrivateCloudInternetWANRouterSwitchADCFirewallSupport NodesPEMMESGSNPolicies or FunctionsControl NodesDatabasesAlternate RoutersPCRFHSSGGSN/PGWv-PCRFSGWh-PCRFPGWOCSGGSN/PGW/ASNGWSIP ASIGRActive DirectoryDEARoami

14、ng HubAccess NodeNetworks and ProtocolsDiameterDSLCableFTTHGbGiGnGTPGx/SdGyGzGeneral HypervisorHypervisorVirtualApplicationsHypervisorVirtualApplicationsThe Hypervisor label is used for generic hypervisors,to be more specific replace the label with a brand name product:VirtualApplicationsHypervisorV

15、irtualApplicationsHypervisorVirtualApplicationsHypervisorVirtualApplicationsHypervisorVirtualApplicationsHypervisorHyper-VKVMvSphereXenFinanceFinanceFinanceFinanceManufacturingRetailMediaPublishingE-CommerceSolarHealthcareAutomotiveGovernmentEducationalternatesExplosive Data GrowthRising Security Th

16、reats/AttacksNew NetworkInnovations NetworkVirtualization HacktivismHigher Cost Structure/Lower MarginsHigher Cost Structure/Lower MarginsHigher Cost Structure/Lower MarginsHigher Cost Structure/Lower MarginsMalwareHigh Network ComplexityLow CustomerSatisfactionLong time to deploy new servicesLower

17、NetworkQualityState Sponsored AttacksDifficult to Manage Lots of BoxesNetwork AvailabilitySignaling stormsMassive Scalability and CapacityFull-ProxyArchitecture for Visibility and ControlExtensibilityUnified Framework and ManagementSimplerArchitecture/NetworkDNSDynamic Multi-LayeredSecuritySSLNFV-Re

18、ady FlexibilityStorageTieringGlobal Load BalancingData MigrationDataBackupDDoSProtectionDNSSECApplicationSecurityData CenterFirewallLocal Load BalancingCloudSecurity and AccessCloudStorageCloudProvisioningBYODSSL VPNSecuritySecuringExchange and SharePointDocumentCachedDocumentLogData PacketCachedDat

19、a Packet EmailData/CommunicationsVideoCameraPOSMediaPerformanceDial,lowPerformanceDial,mediumPerformanceDial,highPerformanceLevelsData CenterHeadquartersBranchGeolocationHomePlace/LocationCloud Hosted AppPhysical Hosted AppCloud Hosted AppsAttackersAttackerWeb BotShieldID TagProvisioningDDoSProtecti

20、onDataMigrationTieringWANOptimizationLocal LoadBalancingGlobal Load BalancingLink Load BalancingUserUser 2AdminUnidentified UserSecurityTechnologysolutionsUsers/AdminAlternativeUserWirelessOtherTransmissionTowerWiFiSatelliteSatelliteDishDoorwayTrafficLightSupportCallCenterVisibility and ControlInfra

21、structureQuoteSearch InspectionVirtualServerCalendarAppAppsGeneric Industry AppsUnsecureMore information and details.Even more information and details.And even more information and details.Always center text to bracket.SecureNo EntryApprovedNotApprovedCertifiedTokenizedPlace these small icons direct

22、ly on top of connecting lines to help tell the story.In general,these icons dont need labels.Use these small icons can be placed on larger icons to change their state.Use the bracket and smaller text box to describe whats going on in more detail.Data CenterData CenterData CenterNetwork Firewall Serv

23、ices+DNS Services+Simple Load Balancing to Tier 2BIG-IP PlatformData CenterDDoS ProtectionS/Gi Network SimplificationSecurity for Service ProvidersApplication ServicesMigration to CloudDevOpsLTE RoamingDNSCloud FederationCloudBurstingNFVVDIHigh-Performance IPS Web Fraud ProtectionSecure Web Gateway激

24、励学生学习的名言格言激励学生学习的名言格言220、每一个成功者都有一个开始。勇于开始，才能找到成功的路。221、世界会向那些有目标和远见的人让路（冯两努香港著名推销商）222、绊脚石乃是进身之阶。223、销售世界上第一号的产品不是汽车，而是自己。在你成功地把自己推销给别人之前，你必须百分之百的把自己推销给自己。224、即使爬到最高的山上，一次也只能脚踏实地地迈一步。225、积极思考造成积极人生，消极思考造成消极人生。226、人之所以有一张嘴，而有两只耳朵，原因是听的要比说的多一倍。227、别想一下造出大海，必须先由小河川开始。228、有事者，事竟成；破釜沉舟，百二秦关终归楚；苦心人，天不负；卧

25、薪尝胆，三千越甲可吞吴。229、以诚感人者，人亦诚而应。230、积极的人在每一次忧患中都看到一个机会，而消极的人则在每个机会都看到某种忧患。231、出门走好路，出口说好话，出手做好事。232、旁观者的姓名永远爬不到比赛的计分板上。233、怠惰是贫穷的制造厂。234、莫找借口失败，只找理由成功。（不为失败找理由，要为成功找方法）235、如果我们想要更多的玫瑰花，就必须种植更多的玫瑰树。236、伟人之所以伟大，是因为他与别人共处逆境时，别人失去了信心，他却下决心实现自己的目标。237、世上没有绝望的处境，只有对处境绝望的人。238、回避现实的人，未来将更不理想。239、当你感到悲哀痛苦时，最好是去

26、学些什么东西。学习会使你永远立于不败之地。240、伟人所达到并保持着的高处，并不是一飞就到的，而是他们在同伴们都睡着的时候，一步步艰辛地向上爬241、世界上那些最容易的事情中，拖延时间最不费力。242、坚韧是成功的一大要素，只要在门上敲得够久、够大声，终会把人唤醒的。243、人之所以能，是相信能。244、没有口水与汗水，就没有成功的泪水。245、一个有信念者所开发出的力量，大于99个只有兴趣者。246、环境不会改变，解决之道在于改变自己。247、两粒种子，一片森林。248、每一发奋努力的背后，必有加倍的赏赐。249、如果你希望成功，以恒心为良友，以经验为参谋，以小心为兄弟，以希望为哨兵。250、大多数人想要改造这个世界，但却罕有人想改造自己。